Coldcard's active wallet exploit has already drained roughly $114 million in Bitcoin, and the maker is now urging users with affected models to transfer.